style-learner
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The
feature-extraction.mdmodule contains Bash commands (awk,tr,grep,bc) and Python snippets for text analysis. While these are standard tools for the skill's stated purpose, they represent the execution of code on local data. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill is designed to read and analyze untrusted external text files (exemplars) to build style profiles. Maliciously crafted exemplar text could attempt to inject instructions into the resulting 'Style Profile' or influence the agent's behavior during the generation phase.
- Ingestion points:
Readtool usage infeature-extraction.mdandexemplar-reference.mdto load source texts. - Boundary markers: The skill lacks explicit boundary markers or 'ignore' instructions when processing the content of exemplar files.
- Capability inventory: The skill has access to
Bash,Python,Write, andEdittools, which could be leveraged if an injection is successful. - Sanitization: Analysis is performed using regex and quantitative counters, which provides a level of structural isolation, but the resulting textual descriptions (e.g., 'Voice/Tone') are directly interpolated into future generation prompts.
Audit Metadata